Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Snapav Clear all filters
TI-2023-09413 CVE-2023-23582 · GHSA-jj77-6h6h-gh59

Heap-based buffer overflow in Snap One Wattbox WB-300-IP-3

Priority MEDIUM 50

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code or crash the device remotely.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00832 Published 2023-01-30 No fix listed CWE-122
TI-2023-08649 CVE-2023-22389 · GHSA-h9xm-49jv-5p2p

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext…

Priority LOW 29

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via Save/Restore–>Backup Settings, which could be read by any user accessing the fil…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00477 Published 2023-01-30 No fix listed CWE-256
TI-2023-09805 CVE-2023-24020 · GHSA-rv9f-9w9v-4x2w

Missing brute-force protection in Snap One Wattbox WB-300-IP-3

Priority MEDIUM 49

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple attempts to force a login.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00645 Published 2023-01-30 No fix listed CWE-307